[jira] [Commented] (ACCUMULO-4488) fix gaps in user manual section on Kerberos for clients
[ https://issues.apache.org/jira/browse/ACCUMULO-4488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15559108#comment-15559108 ] Sean Busbey commented on ACCUMULO-4488: --- {quote} oh, did you fix it? :) {quote} yeah, it ended up just being a matter of removing some attempts to set a different JAVA_HOME from the one that came in with the job. > fix gaps in user manual section on Kerberos for clients > > > Key: ACCUMULO-4488 > URL: https://issues.apache.org/jira/browse/ACCUMULO-4488 > Project: Accumulo > Issue Type: Bug > Components: docs >Affects Versions: 1.7.1, 1.7.2 >Reporter: Sean Busbey >Assignee: Sean Busbey >Priority: Critical > Fix For: 1.7.3, 1.8.1, 2.0.0 > > Attachments: ACCUMULO-4488.1.patch, ACCUMULO-4488.2.patch > > Time Spent: 1h > Remaining Estimate: 0h > > clean up several gaps in the docs that I stumbled on while setting up a > cluster with kerberos for clients: > * document setting up a superuser on an existing system that's enabling > kerberos > * include example of verifying access for the superuser > * per-user client configuration gives wrong filename > * per-user client configuration required additions for kerberos missing > {{rpc.sasl.qop}} > * document {{trace.token.property.keytab}} > * note required permissions for trace user (Table.READ, Table.WRITE, > Table.ALTER_TABLE) -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (ACCUMULO-4488) fix gaps in user manual section on Kerberos for clients
[ https://issues.apache.org/jira/browse/ACCUMULO-4488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15558662#comment-15558662 ] Josh Elser commented on ACCUMULO-4488: -- oh, did you fix it? :) > fix gaps in user manual section on Kerberos for clients > > > Key: ACCUMULO-4488 > URL: https://issues.apache.org/jira/browse/ACCUMULO-4488 > Project: Accumulo > Issue Type: Bug > Components: docs >Affects Versions: 1.7.1, 1.7.2 >Reporter: Sean Busbey >Assignee: Sean Busbey >Priority: Critical > Fix For: 1.7.3, 1.8.1, 2.0.0 > > Attachments: ACCUMULO-4488.1.patch, ACCUMULO-4488.2.patch > > Time Spent: 0.5h > Remaining Estimate: 0h > > clean up several gaps in the docs that I stumbled on while setting up a > cluster with kerberos for clients: > * document setting up a superuser on an existing system that's enabling > kerberos > * include example of verifying access for the superuser > * per-user client configuration gives wrong filename > * per-user client configuration required additions for kerberos missing > {{rpc.sasl.qop}} > * document {{trace.token.property.keytab}} > * note required permissions for trace user (Table.READ, Table.WRITE, > Table.ALTER_TABLE) -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (ACCUMULO-4488) fix gaps in user manual section on Kerberos for clients
[ https://issues.apache.org/jira/browse/ACCUMULO-4488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15557419#comment-15557419 ] Christopher Tubbs commented on ACCUMULO-4488: - Or we just turn it into two bulleted lists, so the breakup doesn't matter. > fix gaps in user manual section on Kerberos for clients > > > Key: ACCUMULO-4488 > URL: https://issues.apache.org/jira/browse/ACCUMULO-4488 > Project: Accumulo > Issue Type: Bug > Components: docs >Affects Versions: 1.7.1, 1.7.2 >Reporter: Sean Busbey >Assignee: Sean Busbey >Priority: Critical > Fix For: 1.7.3, 1.8.1, 2.0.0 > > Attachments: ACCUMULO-4488.1.patch, ACCUMULO-4488.2.patch > > Time Spent: 0.5h > Remaining Estimate: 0h > > clean up several gaps in the docs that I stumbled on while setting up a > cluster with kerberos for clients: > * document setting up a superuser on an existing system that's enabling > kerberos > * include example of verifying access for the superuser > * per-user client configuration gives wrong filename > * per-user client configuration required additions for kerberos missing > {{rpc.sasl.qop}} > * document {{trace.token.property.keytab}} > * note required permissions for trace user (Table.READ, Table.WRITE, > Table.ALTER_TABLE) -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (ACCUMULO-4488) fix gaps in user manual section on Kerberos for clients
[ https://issues.apache.org/jira/browse/ACCUMULO-4488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15557414#comment-15557414 ] Christopher Tubbs commented on ACCUMULO-4488: - Not sure how to fix list issue. Spent a few minutes trying earlier. I think maybe just drop that last item from the list and turn it into a post-list paragraph. Either that, or move the block outside the list. > fix gaps in user manual section on Kerberos for clients > > > Key: ACCUMULO-4488 > URL: https://issues.apache.org/jira/browse/ACCUMULO-4488 > Project: Accumulo > Issue Type: Bug > Components: docs >Affects Versions: 1.7.1, 1.7.2 >Reporter: Sean Busbey >Assignee: Sean Busbey >Priority: Critical > Fix For: 1.7.3, 1.8.1, 2.0.0 > > Attachments: ACCUMULO-4488.1.patch, ACCUMULO-4488.2.patch > > Time Spent: 0.5h > Remaining Estimate: 0h > > clean up several gaps in the docs that I stumbled on while setting up a > cluster with kerberos for clients: > * document setting up a superuser on an existing system that's enabling > kerberos > * include example of verifying access for the superuser > * per-user client configuration gives wrong filename > * per-user client configuration required additions for kerberos missing > {{rpc.sasl.qop}} > * document {{trace.token.property.keytab}} > * note required permissions for trace user (Table.READ, Table.WRITE, > Table.ALTER_TABLE) -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (ACCUMULO-4488) fix gaps in user manual section on Kerberos for clients
[ https://issues.apache.org/jira/browse/ACCUMULO-4488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15557412#comment-15557412 ] Sean Busbey commented on ACCUMULO-4488: --- [~mdrob], looks like Yetus should work again for precommits on jira. see the response on ACCUMULO-4489. > fix gaps in user manual section on Kerberos for clients > > > Key: ACCUMULO-4488 > URL: https://issues.apache.org/jira/browse/ACCUMULO-4488 > Project: Accumulo > Issue Type: Bug > Components: docs >Affects Versions: 1.7.1, 1.7.2 >Reporter: Sean Busbey >Assignee: Sean Busbey >Priority: Critical > Fix For: 1.7.3, 1.8.1, 2.0.0 > > Attachments: ACCUMULO-4488.1.patch, ACCUMULO-4488.2.patch > > Time Spent: 0.5h > Remaining Estimate: 0h > > clean up several gaps in the docs that I stumbled on while setting up a > cluster with kerberos for clients: > * document setting up a superuser on an existing system that's enabling > kerberos > * include example of verifying access for the superuser > * per-user client configuration gives wrong filename > * per-user client configuration required additions for kerberos missing > {{rpc.sasl.qop}} > * document {{trace.token.property.keytab}} > * note required permissions for trace user (Table.READ, Table.WRITE, > Table.ALTER_TABLE) -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (ACCUMULO-4488) fix gaps in user manual section on Kerberos for clients
[ https://issues.apache.org/jira/browse/ACCUMULO-4488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15557012#comment-15557012 ] Sean Busbey commented on ACCUMULO-4488: --- I'm pretty sure anyone with builds.a.o access can make the needed changes or disable it. I'll make a go at the former and do the latter if needed. Anyone know enough asciidoc to tell me how to correct the list issue? > fix gaps in user manual section on Kerberos for clients > > > Key: ACCUMULO-4488 > URL: https://issues.apache.org/jira/browse/ACCUMULO-4488 > Project: Accumulo > Issue Type: Bug > Components: docs >Affects Versions: 1.7.1, 1.7.2 >Reporter: Sean Busbey >Assignee: Sean Busbey >Priority: Critical > Fix For: 1.7.3, 1.8.1, 2.0.0 > > Attachments: ACCUMULO-4488.1.patch, ACCUMULO-4488.2.patch > > Time Spent: 0.5h > Remaining Estimate: 0h > > clean up several gaps in the docs that I stumbled on while setting up a > cluster with kerberos for clients: > * document setting up a superuser on an existing system that's enabling > kerberos > * include example of verifying access for the superuser > * per-user client configuration gives wrong filename > * per-user client configuration required additions for kerberos missing > {{rpc.sasl.qop}} > * document {{trace.token.property.keytab}} > * note required permissions for trace user (Table.READ, Table.WRITE, > Table.ALTER_TABLE) -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (ACCUMULO-4488) fix gaps in user manual section on Kerberos for clients
[ https://issues.apache.org/jira/browse/ACCUMULO-4488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=1354#comment-1354 ] Josh Elser commented on ACCUMULO-4488: -- Catching up: this looks great! Thanks for making these additions! bq. Unrelated, can we disable Yetus until we get it fixed? I don't know of a way to do this. It would require an infra ask. Do you have cycles to get Yetus running again? :) > fix gaps in user manual section on Kerberos for clients > > > Key: ACCUMULO-4488 > URL: https://issues.apache.org/jira/browse/ACCUMULO-4488 > Project: Accumulo > Issue Type: Bug > Components: docs >Affects Versions: 1.7.1, 1.7.2 >Reporter: Sean Busbey >Assignee: Sean Busbey >Priority: Critical > Fix For: 1.7.3, 1.8.1, 2.0.0 > > Attachments: ACCUMULO-4488.1.patch, ACCUMULO-4488.2.patch > > Time Spent: 0.5h > Remaining Estimate: 0h > > clean up several gaps in the docs that I stumbled on while setting up a > cluster with kerberos for clients: > * document setting up a superuser on an existing system that's enabling > kerberos > * include example of verifying access for the superuser > * per-user client configuration gives wrong filename > * per-user client configuration required additions for kerberos missing > {{rpc.sasl.qop}} > * document {{trace.token.property.keytab}} > * note required permissions for trace user (Table.READ, Table.WRITE, > Table.ALTER_TABLE) -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (ACCUMULO-4488) fix gaps in user manual section on Kerberos for clients
[ https://issues.apache.org/jira/browse/ACCUMULO-4488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15553808#comment-15553808 ] Mike Drob commented on ACCUMULO-4488: - +1. Unrelated, can we disable Yetus until we get it fixed? > fix gaps in user manual section on Kerberos for clients > > > Key: ACCUMULO-4488 > URL: https://issues.apache.org/jira/browse/ACCUMULO-4488 > Project: Accumulo > Issue Type: Bug > Components: docs >Affects Versions: 1.7.1, 1.7.2 >Reporter: Sean Busbey >Assignee: Sean Busbey >Priority: Critical > Fix For: 1.7.3, 1.8.1, 2.0.0 > > Attachments: ACCUMULO-4488.1.patch, ACCUMULO-4488.2.patch > > > clean up several gaps in the docs that I stumbled on while setting up a > cluster with kerberos for clients: > * document setting up a superuser on an existing system that's enabling > kerberos > * include example of verifying access for the superuser > * per-user client configuration gives wrong filename > * per-user client configuration required additions for kerberos missing > {{rpc.sasl.qop}} > * document {{trace.token.property.keytab}} > * note required permissions for trace user (Table.READ, Table.WRITE, > Table.ALTER_TABLE) -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (ACCUMULO-4488) fix gaps in user manual section on Kerberos for clients
[ https://issues.apache.org/jira/browse/ACCUMULO-4488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15553014#comment-15553014 ] Hadoop QA commented on ACCUMULO-4488: - | (x) *{color:red}-1 overall{color}* | \\ \\ || Vote || Subsystem || Runtime || Comment || | {color:red}-1{color} | {color:red} pre-patch {color} | {color:red} 0m 0s {color} | {color:red} JAVA_HOME is not defined. {color} | \\ \\ || Subsystem || Report/Notes || | JIRA Patch URL | https://issues.apache.org/jira/secure/attachment/12832024/ACCUMULO-4488.2.patch | | JIRA Issue | ACCUMULO-4488 | | Optional Tests | asflicense javac javadoc unit | | uname | Linux asf909.gq1.ygridcore.net 3.13.0-96-generic #143-Ubuntu SMP Mon Aug 29 20:15:20 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux | | Build tool | maven | | Personality | /home/jenkins/jenkins-slave/workspace/PreCommit-ACCUMULO-Build/test_framework/yetus-0.3.0/lib/precommit/personality/accumulo.sh | | git revision | master / 1c218de | | Console output | https://builds.apache.org/job/PreCommit-ACCUMULO-Build/50/console | | Powered by | Apache Yetus 0.3.0 http://yetus.apache.org | This message was automatically generated. > fix gaps in user manual section on Kerberos for clients > > > Key: ACCUMULO-4488 > URL: https://issues.apache.org/jira/browse/ACCUMULO-4488 > Project: Accumulo > Issue Type: Bug > Components: docs >Affects Versions: 1.7.1, 1.7.2 >Reporter: Sean Busbey >Assignee: Sean Busbey >Priority: Critical > Fix For: 1.7.3, 1.8.1, 2.0.0 > > Attachments: ACCUMULO-4488.1.patch, ACCUMULO-4488.2.patch > > > clean up several gaps in the docs that I stumbled on while setting up a > cluster with kerberos for clients: > * document setting up a superuser on an existing system that's enabling > kerberos > * include example of verifying access for the superuser > * per-user client configuration gives wrong filename > * per-user client configuration required additions for kerberos missing > {{rpc.sasl.qop}} > * document {{trace.token.property.keytab}} > * note required permissions for trace user (Table.READ, Table.WRITE, > Table.ALTER_TABLE) -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (ACCUMULO-4488) fix gaps in user manual section on Kerberos for clients
[ https://issues.apache.org/jira/browse/ACCUMULO-4488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15552961#comment-15552961 ] Mike Drob commented on ACCUMULO-4488: - bq. +Note that on an existing cluster the server side changes will a full cluster shutdown and restart. You should Missing a word. bq. +- version: 1.7.2 I was going to ask if this should be 1.8.0, but spot checking our docs we are not consistent on this at all. bq. +*A*: This indicates that the Monitor has not been able to successfully log in a client-side user to read from the +trace+ table. Accumulo allows the TraceServer to rely on the property +general.kerberos.keytab+ as a fallback when logging in the trace user if the +trace.token.property.keytab+ property isn't defined. Some earlier versions of Accumulo did not do this same fallback for the Monitor's use of the trace user. The end result is that if you just configure +general.kerberos.keytab+ you will end up with a system that properly logs trace information but can't view it. nit: remove "just" > fix gaps in user manual section on Kerberos for clients > > > Key: ACCUMULO-4488 > URL: https://issues.apache.org/jira/browse/ACCUMULO-4488 > Project: Accumulo > Issue Type: Bug > Components: docs >Affects Versions: 1.7.1, 1.7.2 >Reporter: Sean Busbey >Assignee: Sean Busbey >Priority: Critical > Fix For: 1.7.3, 1.8.1, 2.0.0 > > Attachments: ACCUMULO-4488.1.patch > > > clean up several gaps in the docs that I stumbled on while setting up a > cluster with kerberos for clients: > * document setting up a superuser on an existing system that's enabling > kerberos > * include example of verifying access for the superuser > * per-user client configuration gives wrong filename > * per-user client configuration required additions for kerberos missing > {{rpc.sasl.qop}} > * document {{trace.token.property.keytab}} > * note required permissions for trace user (Table.READ, Table.WRITE, > Table.ALTER_TABLE) -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (ACCUMULO-4488) fix gaps in user manual section on Kerberos for clients
[ https://issues.apache.org/jira/browse/ACCUMULO-4488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15552539#comment-15552539 ] Hadoop QA commented on ACCUMULO-4488: - | (x) *{color:red}-1 overall{color}* | \\ \\ || Vote || Subsystem || Runtime || Comment || | {color:red}-1{color} | {color:red} pre-patch {color} | {color:red} 0m 0s {color} | {color:red} JAVA_HOME is not defined. {color} | \\ \\ || Subsystem || Report/Notes || | JIRA Patch URL | https://issues.apache.org/jira/secure/attachment/12831987/ACCUMULO-4488.1.patch | | JIRA Issue | ACCUMULO-4488 | | Optional Tests | asflicense javac javadoc unit | | uname | Linux asf909.gq1.ygridcore.net 3.13.0-96-generic #143-Ubuntu SMP Mon Aug 29 20:15:20 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux | | Build tool | maven | | Personality | /home/jenkins/jenkins-slave/workspace/PreCommit-ACCUMULO-Build/test_framework/yetus-0.3.0/lib/precommit/personality/accumulo.sh | | git revision | master / 1c218de | | Console output | https://builds.apache.org/job/PreCommit-ACCUMULO-Build/49/console | | Powered by | Apache Yetus 0.3.0 http://yetus.apache.org | This message was automatically generated. > fix gaps in user manual section on Kerberos for clients > > > Key: ACCUMULO-4488 > URL: https://issues.apache.org/jira/browse/ACCUMULO-4488 > Project: Accumulo > Issue Type: Bug > Components: docs >Affects Versions: 1.7.1, 1.7.2 >Reporter: Sean Busbey >Assignee: Sean Busbey >Priority: Critical > Fix For: 1.7.3, 1.8.1, 2.0.0 > > Attachments: ACCUMULO-4488.1.patch > > > clean up several gaps in the docs that I stumbled on while setting up a > cluster with kerberos for clients: > * document setting up a superuser on an existing system that's enabling > kerberos > * include example of verifying access for the superuser > * per-user client configuration gives wrong filename > * per-user client configuration required additions for kerberos missing > {{rpc.sasl.qop}} > * document {{trace.token.property.keytab}} > * note required permissions for trace user (Table.READ, Table.WRITE, > Table.ALTER_TABLE) -- This message was sent by Atlassian JIRA (v6.3.4#6332)